Microsoft
http://ucrhp.rgva725lyrd.teams-login.xyz/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3a%2f%2fwww.microsoft365.com%2flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3a%2f%2fwww.office.com%2fv2%2fofficehome.all&response_mode=form_post&nonce=639173654477301639.nzliodnjotitmza4mi00zjm0lwi2yzgtytbhzjdmnzexnjvjzjg0ogmxmtgtndq4nc00oty5ltg4mzgtnzk5nmqyy2zlmdy5&ui_locales=en-us&mkt=en-us&client-request-id=33a52e9a-4913-4d6d-a0c5-7ed90b20da08&state=b3ecj7mh76rpiwz-7cmwefibzamkp7-p_up5ayqwoz6utuciaxuncstzkba9mlqd358cvu6hpvofm8wfdcs6rfujwaolc4asheikdonpd3yd0oeta7tse_t9wkwgur49zsb8eanhowlaifhmalgdefwb8ginhv7uhyuxylccu7j5dkmh66xie9hussqwzjrwafwfl5fy_v_jxzowyqdgicypf9ew7a8rlzgv1hvkx1bebwgxu1rrqinvujzi9pimbojet71qgorgnkuya5wdp8p-g4brns5volfvzsxndoeyaiyi0rabdxbqunnrao3v7abiocqecnwjp-61qohigmfje2tljsgxlg7qee-kn6jlmb6aavb8q-6-ffr02_c5j-tl4vhzblg1wjynn_vwg1me28kgl_6jahtrgndezeiqbvpszlfblh04bux30fkk&x-client-sku=id_net8_0&x-client-ver=8.14.0.0 Access site
Screenshot
Screenshot of ucrhp.rgva725lyrd.teams-login.xyz
Investigate
Domain ucrhp.rgva725lyrd.teams-login.xyz0 CT hosts on apex
urlscan page.domain VirusTotal Whois
IP 20.58.174.214
urlscan page.ip VirusTotal ipinfo Greynoise
URL http://ucrhp.rgva725lyrd.teams-login.xyz/common/oauth2/v2.0…
urlscan Wayback archive.today
Cert -
crt.sh Censys Google CT
WHOIS
Registrar NameSilo, LLC
Network
IP 20.58.174.214
Country AustraliaAustralia
Hosting Microsoft Corporation
ASN AS8075
TLS Cert -
Detection Google Safe Browsing OpenPhish
GSB category: SOCIAL_ENGINEERING
CleanPhishTank · TweetFeed · urlscan.io
Phishunt 29 low Keyword matchLong domainGoogle Safe Browsing Beta
Report this phishing
Network / ASN Microsoft Corporation
abuse@microsoft.com Web form
Registrar NameSilo, LLC
abuse@namesilo.com
Brand owner Microsoft
phish@office365.microsoft.com Web form
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank

Tracked from 2026-06-18 13:02 UTC  ·  Last refreshed 2026-06-24 01:30 UTC